Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only
Expand all | Collapse all

Don't miss our June 21 webinar with QRadar expert Jose Bravo

  • 1.  Don't miss our June 21 webinar with QRadar expert Jose Bravo

    Posted Tue June 18, 2019 07:20 AM
    Edited by Jennifer Tullman-Botzer Tue June 18, 2019 07:19 AM
    Have you ever wanted to journey inside the mind of a hacker with QRadar expert Jose Bravo?

    Register now for our June 21 webinar, "Through the Hacker's Eyes: Detecting Attacks on Fully Patched Windows Machines" and you'll get exactly that chance!

    After all, to successfully stop cyberattackers, you need to understand them: how their minds work, what their goals are, and what techniques they use to break through your defenses. 

    Don't miss this opportunity to learn directly from one of IBM Security's best!


    ------------------------------
    Jennifer Tullman-Botzer
    Digital Strategist
    IBM
    Tel Aviv
    ------------------------------


  • 2.  RE: Don't miss our June 21 webinar with QRadar expert Jose Bravo

    Posted Wed June 19, 2019 09:55 AM
    <g class="gr_ gr_11 gr-alert gr_gramm gr_inline_cards gr_run_anim Punctuation only-ins replaceWithoutSep" id="11" data-gr-id="11">Thanks</g> @Jennifer Tullman-Botzer for the post. I have registered for the event.
    Hackers with the intruder mindset usually follow the Cyber Kill Chain to achieve their goals of successful intrusion and penetration or disruption of services at the least exploiting the loopholes and vulnerabilities generating threats and offenses in IBM QRadar SIEM.
    I have simulated attacks on QRadar to detect them as Offenses on the Console Dashboard. QRadar CE v7.3.1 installed on CentOS 7 Minimal hosted in VMWare 15 Pro receives Type A, B <g class="gr_ gr_12 gr-alert gr_gramm gr_inline_cards gr_run_anim Punctuation only-ins replaceWithoutSep" id="12" data-gr-id="12">and</g> C Superflows as well as Authentication attacks from a Kali Linux 2019.2 hosted on the same hypervisor with same LAN connection configurations; the Primary OS being Ubuntu 18.04 LTS on laptop in the Firefox browser on the IBM QRadar's console detects the attacks ranging from Warnings to Offenses of varied Magnitudes.

    Also, attacks on Ubuntu performed from Kali have been detected in the QRadar by virtue of System Logs redirection to QRadar from Ubuntu 18.04.

    ------------------------------
    DCE Tapan Jatakia
    Student & Cyber Practitioner
    DIT University
    Dehradun, Uttarakhand,
    INDIA - 248001.
    +91 9664332984
    ------------------------------